ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter...
0.69github-advisories · v1 · published 11/3/2026, 12:31:48 PM · modified 11/3/2026, 12:31:53 PM · TLP:CLEAR
offsec.vulnerability
Source evidence ↗Entities
cve: CVE-2026-77691ghsa: GHSA-v5fq-f263-f227cwe: CWE-78
Assessment
Fact summary
low · heuristicZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA
Technical delta
low · heuristicAutomated delta unavailable (heuristic mode).
Defensive significance
low · heuristicNone identified (heuristic mode).
Extracted text
ZohoCorp ManageEngine Key Manager Plus versions before 7151 allow authenticated users to enter malicious input when configuring a Microsoft CA